CVE-2005-0358

EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to gain privileges by modifying an authentication token.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1	Patch Vendor Advisory
http://www.kb.cert.org/vuls/id/407641	Patch Third Party Advisory US Government Resource
http://www.securityfocus.com/bid/14582	Patch Vendor Advisory
http://www.osvdb.org/18801
http://securitytracker.com/id?1014713	Patch
http://secunia.com/advisories/16470	Vendor Advisory
http://secunia.com/advisories/16464	Patch Vendor Advisory
http://www.legato.com/support/websupport/product_alerts/081605_NW_token_authentication.htm
https://exchange.xforce.ibmcloud.com/vulnerabilities/21892

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:emc:legato_networker:7.2:::::::*
	cpe:2.3:a:sun:solstice_backup:6.0:::::::*
	cpe:2.3:a:emc:legato_networker:4.2.2:::::::*
	cpe:2.3:a:emc:legato_networker:6.0:::::::*
	cpe:2.3:a:sun:storedge_enterprise_backup_software:7.1:::::::*
	cpe:2.3:a:sun:storedge_enterprise_backup_software:7.2:::::::*
	cpe:2.3:a:emc:legato_networker:6.1:::::::*
	cpe:2.3:a:emc:legato_networker:7.13:::::::*
	cpe:2.3:a:sun:solstice_backup:6.1:::::::*
	cpe:2.3:a:sun:storedge_enterprise_backup_software:7.0:::::::*

Information

Published : 2005-08-23 04:00

Updated : 2017-07-11 01:32

NVD link : CVE-2005-0358

Mitre link : CVE-2005-0358

JSON object : View

Products Affected

sun

storedge_enterprise_backup_software
solstice_backup

emc

legato_networker

CWE

NVD-CWE-Other

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1", "name": "101886", "tags": ["Patch", "Vendor Advisory"], "refsource": "SUNALERT"}, {"url": "http://www.kb.cert.org/vuls/id/407641", "name": "VU#407641", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "refsource": "CERT-VN"}, {"url": "http://www.securityfocus.com/bid/14582", "name": "14582", "tags": ["Patch", "Vendor Advisory"], "refsource": "BID"}, {"url": "http://www.osvdb.org/18801", "name": "18801", "tags": [], "refsource": "OSVDB"}, {"url": "http://securitytracker.com/id?1014713", "name": "1014713", "tags": ["Patch"], "refsource": "SECTRACK"}, {"url": "http://secunia.com/advisories/16470", "name": "16470", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://secunia.com/advisories/16464", "name": "16464", "tags": ["Patch", "Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.legato.com/support/websupport/product_alerts/081605_NW_token_authentication.htm", "name": "http://www.legato.com/support/websupport/product_alerts/081605_NW_token_authentication.htm", "tags": [], "refsource": "CONFIRM"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21892", "name": "legato-token-gain-privileges(21892)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to gain privileges by modifying an authentication token."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2005-0358", "ASSIGNER": "cert@cert.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2005-08-23T04:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:emc:legato_networker:7.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:sun:solstice_backup:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:emc:legato_networker:4.2.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:emc:legato_networker:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:sun:storedge_enterprise_backup_software:7.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:sun:storedge_enterprise_backup_software:7.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:emc:legato_networker:6.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:emc:legato_networker:7.13:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:sun:solstice_backup:6.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:sun:storedge_enterprise_backup_software:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-07-11T01:32Z"}